---
title: "Open-weight GLM 5.3 autonomously built Firefox exploit chains in under 48 hours"
url: https://www.parallelquant.com/posts/open-weight-glm-5-3-autonomously-built-firefox-exploit-chains-in-under-4-c3b8c7
source_name: "The Decoder"
source_url: https://the-decoder.com/open-weight-model-glm-5-3-built-full-firefox-exploit-chains-with-zero-human-input-in-under-48-hours/
published: 2026-10-30T12:22:18.000Z
topics: ["security", "llms", "open source"]
publisher: "Parallel Quant"
---

# Open-weight GLM 5.3 autonomously built Firefox exploit chains in under 48 hours

*2026-10-30 · Source: [The Decoder](https://the-decoder.com/open-weight-model-glm-5-3-built-full-firefox-exploit-chains-with-zero-human-input-in-under-48-hours/)*

Epoch AI researchers report that the openly available GLM 5.3 model turned public security fixes into working exploits before updates reached Firefox users. It compromised six Firefox releases with no human input, at about $1,000 in API fees each. None of the providers tested triggered safeguards.

**Why it matters:** Patch-to-exploit conversion has been a human bottleneck that gave defenders a window after fixes shipped. With open-weight models doing it cheaply and autonomously, that window shrinks and provider-side safeguards stop being a reliable control. It echoes the recent reports of AI agents breaching systems, and strengthens the case for faster patch deployment.

**Topics:** security, llms, open source

---
Read the original: https://the-decoder.com/open-weight-model-glm-5-3-built-full-firefox-exploit-chains-with-zero-human-input-in-under-48-hours/
Canonical: https://www.parallelquant.com/posts/open-weight-glm-5-3-autonomously-built-firefox-exploit-chains-in-under-4-c3b8c7
Published by Parallel Quant — https://www.parallelquant.com